Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          3IZlEDgisC18z6g2uWqEOWx9wCpcEwaM5VJkPNMtooE=
Subject key identifier:   1B:CD:4B:6F:3F:E1:F4:AF:1C:B4:73:BA:47:01:F6:19:DD:B7:2E:B0
Certificate issuer:       /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial:       26CF64442C8FD1E5A4AB34DDD087D641B2D94F8A
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Wed 26 Mar 2025 16:50:19 +0000
ROA not before:           Wed 26 Mar 2025 16:45:19 +0000
ROA not after:            Wed 25 Mar 2026 16:50:19 +0000
asID:                     267942
IP address blocks:        2804:5590:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cf:64:44:2c:8f:d1:e5:a4:ab:34:dd:d0:87:d6:41:b2:d9:4f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Validity
            Not Before: Mar 26 16:45:19 2025 GMT
            Not After : Mar 25 16:50:19 2026 GMT
        Subject: CN=1BCD4B6F3FE1F4AF1CB473BA4701F619DDB72EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:b7:fc:c7:b5:7e:5d:57:dd:ea:82:fb:53:
                    d7:19:58:00:a7:67:c7:6f:21:76:ac:8e:29:e1:22:
                    44:16:bc:ae:e6:da:f2:7e:14:82:72:90:c5:d6:ca:
                    d1:5c:b9:de:85:6b:28:43:96:db:7c:bd:58:98:20:
                    dc:1f:9f:46:f3:cc:b5:8a:2d:39:83:c5:14:19:49:
                    a4:d9:62:e1:74:3b:b9:6a:3a:56:bf:b3:6a:19:e0:
                    ba:03:48:46:0f:d3:c6:9a:dc:b4:63:27:80:99:17:
                    97:d2:4a:8c:de:af:31:3f:ad:5c:ac:d7:d6:93:88:
                    50:32:8a:07:a3:47:fb:51:67:9d:4a:28:ab:61:95:
                    95:c9:c0:ec:45:39:5b:df:a9:69:c6:a4:ca:d4:20:
                    57:a0:54:56:1f:a7:e9:f4:f0:cc:40:b3:de:ab:a4:
                    b9:19:c2:b0:6f:ae:94:2b:24:4c:f0:4d:37:c8:d3:
                    e5:8a:84:03:fd:56:58:6a:78:13:1b:41:09:64:4f:
                    fc:6d:9d:4f:1e:fb:34:59:96:02:86:55:68:2a:cd:
                    b2:53:b9:51:01:98:94:9e:a6:4a:90:90:7e:af:0a:
                    86:87:10:ef:3d:30:66:16:8c:ae:34:13:09:61:f6:
                    12:5d:67:99:ee:e4:ad:a3:e9:3e:3f:a1:8c:06:48:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CD:4B:6F:3F:E1:F4:AF:1C:B4:73:BA:47:01:F6:19:DD:B7:2E:B0
            X509v3 Authority Key Identifier:
                keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a383030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:5b:5e:05:b9:e5:79:e5:2a:cf:c1:d2:3d:a8:07:5d:bd:cf:
         62:dd:b7:aa:6f:6e:ad:44:c4:62:60:fc:f9:2f:e0:2c:f2:46:
         9e:76:75:a9:bf:f7:36:c6:6c:d2:31:24:5c:f8:eb:a6:18:6b:
         d7:31:e5:f8:51:fb:63:a8:6a:8b:09:7e:b0:50:b3:66:14:5c:
         dc:6a:2c:a2:f3:c8:0e:93:1a:f4:5d:97:d3:98:5d:47:1e:cf:
         c8:f4:2a:41:66:e3:06:39:1d:89:f1:2b:a3:9e:6c:1a:e9:33:
         8b:4e:1e:bc:88:87:cd:e4:4c:95:43:ed:d5:64:40:a8:2f:29:
         a7:29:62:73:8b:96:99:66:44:4b:52:1f:77:e8:46:b1:ea:d8:
         6b:11:73:08:98:f0:c1:3c:6b:38:a6:8b:64:a6:f2:32:e9:8b:
         a2:2d:35:e4:db:10:8b:0f:f5:13:af:5f:73:55:f2:ff:89:8a:
         7f:1d:42:3a:c8:42:72:06:7f:bb:6a:0c:8d:c6:ae:96:c5:fb:
         bd:b7:83:95:b9:c6:67:a9:02:fa:b4:38:05:0b:df:bb:68:74:
         57:b8:e2:db:7f:48:45:48:87:72:76:02:fa:fe:81:36:c2:c9:
         6e:63:13:23:dc:5d:30:69:ac:82:da:ee:80:cc:f8:c4:d2:57:
         c3:ff:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:37 2025 by rpki-client